Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b05e76f8-7e37-4663-ae5f-9f03054cfe92/3a05921a-6543-395d-9659-96d79862bab5.roa
File:                     3a05921a-6543-395d-9659-96d79862bab5.roa (download)
Hash identifier:          DAvy1biFqA1A6wHYYsFYz4xtNASTB27hnxk4hKj0IaA=
Subject key identifier:   DF:02:D3:19:74:88:2C:E1:E8:14:F5:20:0D:20:7C:1B:DD:59:CE:F4
Certificate issuer:       /CN=b05e76f8-7e37-4663-ae5f-9f03054cfe92
Certificate serial:       010D0C9F4328583D6E32AB5252918971DCA6FEB0
Authority key identifier: 34:D0:72:D6:CB:A5:9B:93:4E:96:2F:C0:50:7B:B3:F7:4A:A2:02:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b05e76f8-7e37-4663-ae5f-9f03054cfe92.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b05e76f8-7e37-4663-ae5f-9f03054cfe92/3a05921a-6543-395d-9659-96d79862bab5.roa
ROA valid until:          Jul 04 04:00:00 2030 GMT
asID:                     399871
IP address blocks:
    1: 2606:6040::/32 maxlen: 32

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:6e:32:ab:52:52:91:89:71:dc:a6:fe:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b05e76f8-7e37-4663-ae5f-9f03054cfe92
        Validity
            Not Before: Jul 28 04:00:00 2021 GMT
            Not After : Jul  4 04:00:00 2030 GMT
        Subject: CN=6ed37902-75c6-4edd-9c9f-629d0b3289d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:85:95:33:7c:d4:6a:0a:bd:52:b9:2d:b7:57:
                    b6:e1:a1:7e:01:fa:be:2d:b7:5d:48:bd:3f:40:18:
                    81:93:99:58:70:ad:43:f0:78:8b:0b:a2:a8:05:9a:
                    a6:d2:20:97:b0:17:67:df:ae:08:57:dc:9d:a6:52:
                    10:9d:f2:52:ed:f8:ba:31:a0:d0:68:97:b7:54:39:
                    ae:6c:5f:7b:9d:95:e9:9a:30:95:dd:b4:c1:e2:2d:
                    3c:33:2d:90:af:49:08:28:51:4f:d0:75:2d:95:9e:
                    f3:c9:ef:01:e6:83:59:3b:fe:dc:a7:8d:69:60:23:
                    f6:5e:b8:1b:9d:bc:15:86:db:c4:72:65:64:16:8d:
                    f3:39:d9:39:a3:2c:de:f7:43:c5:ff:64:a3:c9:e1:
                    05:c4:c6:f9:ef:82:c6:47:84:d8:2a:3a:d8:59:50:
                    8f:1c:64:b1:0f:06:4b:12:60:b1:3c:c4:97:7e:e6:
                    9d:e4:e0:63:ea:48:18:4e:a5:0d:9e:69:f7:58:87:
                    89:9d:e8:14:55:6b:0f:c3:e3:bd:6c:de:5c:3f:15:
                    b7:e2:48:cd:01:66:72:14:e8:f0:d8:e0:e3:0e:e8:
                    91:11:da:1a:12:94:6d:07:9a:21:42:9f:74:aa:92:
                    18:7d:a3:cf:40:56:40:d8:3f:e5:c7:5e:60:1b:b8:
                    53:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                DF:02:D3:19:74:88:2C:E1:E8:14:F5:20:0D:20:7C:1B:DD:59:CE:F4
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b05e76f8-7e37-4663-ae5f-9f03054cfe92/3a05921a-6543-395d-9659-96d79862bab5.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b05e76f8-7e37-4663-ae5f-9f03054cfe92/b05e76f8-7e37-4663-ae5f-9f03054cfe92.crl

            X509v3 Authority Key Identifier: 
                keyid:34:D0:72:D6:CB:A5:9B:93:4E:96:2F:C0:50:7B:B3:F7:4A:A2:02:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b05e76f8-7e37-4663-ae5f-9f03054cfe92.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:6040::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:f7:d1:d8:f1:b8:44:33:d9:51:2a:d5:3d:68:91:1e:69:f4:
         c1:26:15:07:b2:5d:ee:0f:10:2e:f5:7a:6f:f7:5d:ed:69:f0:
         2c:08:b8:0d:b8:cf:3f:66:38:23:96:80:51:03:a6:ea:7f:c1:
         0f:40:9b:00:ef:10:d7:31:c6:c0:ea:6a:a0:58:ad:60:d6:a3:
         bf:6b:c3:45:2e:61:9a:48:6a:2f:f4:76:5b:1b:a0:7a:6e:ea:
         46:72:f7:5c:27:88:b7:c7:75:cc:c8:d9:02:4e:88:c6:db:24:
         8a:dc:dd:16:16:80:27:e3:21:15:f7:2e:52:ba:01:d3:2d:64:
         b5:3c:87:20:f6:f5:a0:34:72:1d:11:8e:61:7d:d8:ed:a7:5f:
         16:20:79:3b:da:fd:e9:e7:b9:6c:3c:26:49:de:56:c8:84:21:
         38:17:a2:a0:11:34:44:8e:23:1c:09:eb:ae:bc:9d:f3:45:9b:
         90:63:3d:e5:42:26:07:2d:10:82:db:63:7d:73:72:a4:3d:64:
         1b:d4:64:fd:ce:f5:37:b9:1f:7c:ca:11:aa:e8:87:41:42:5a:
         4b:c0:45:30:21:99:15:16:8c:59:df:a4:10:3f:6c:5a:35:00:
         da:83:f3:95:d0:c1:8e:69:64:ad:3e:4c:7d:45:8f:f3:74:64:
         a5:c6:99:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 7 03:09:17 2022 by rpki-client.